- added a call to dns_dnssec_verify

- swapped ISC_R_SUCCESS/DNS_R_CONTINUE in two places
- hitting the end of the list of SIGs without a verification is not success.
This commit is contained in:
Brian Wellington 2000-04-05 22:29:47 +00:00
parent 587922e6d1
commit 0a3e2e1d59

View file

@ -338,15 +338,18 @@ validate(dns_validator_t *val, isc_boolean_t resume) {
if (!resume) {
result = get_key(val, &siginfo);
if (result != DNS_R_CONTINUE)
if (result != ISC_R_SUCCESS)
return (result);
}
INSIST(val->key != NULL);
result = dns_dnssec_verify(event->name, event->rdataset,
val->key, val->view->mctx, &rdata);
if (result == ISC_R_SUCCESS)
return (result);
result = dns_rdataset_next(event->sigrdataset);
} while (result == ISC_R_SUCCESS);
if (result == ISC_R_NOMORE)
result = ISC_R_SUCCESS;
return (result);
}
@ -371,7 +374,7 @@ validator_start(dns_validator_t *val) {
result = DNS_R_NOTIMPLEMENTED;
}
if (result != ISC_R_SUCCESS)
if (result != DNS_R_CONTINUE)
validator_done(val, result);
UNLOCK(&val->lock);